Hi so i recently flashed CAP AC firmware to cAP XL AC, and it's working fine. Now I want to use this as dumb ap but it has only 2 ports WAN/POE in and LAN port/POE out. It does not have a power port.
Firmware used https://openwrt.org/toh/mikrotik/rbcapgi-5acd2nd_cap_ac SnapshotProduct used https://mikrotik.com/product/cap_xl_ac
EDIT: to use the solution in CLI read through https://openwrt.org/docs/guide-user/base-system/user.beginner.cli#editing_files
I'd recommend that you install the latest stable release instead of using snapshot.https://firmware-selector.openwrt.org/?version=23.05.2&target=ipq40xx%2Fmikrotik&id=mikrotik_cap-ac
Once that is done, we can help you by simply putting the wan port into the lan bridge... details once we see the relevant config file (please upgrade first, then post the config):
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
┌──────────────────────────────────────────────────────────────────────┐
│ • MobaXterm Personal Edition v23.6 • │
│ (SSH client, X server and network tools) │
│ │
│ ⮞ SSH session to root@192.168.1.1 │
│ • Direct SSH : ✓ │
│ • SSH compression : ✗ (disabled or not supported by server) │
│ • SSH-browser : ✓ │
│ • X11-forwarding : ✗ (disabled or not supported by server) │
│ │
│ ⮞ For more info, ctrl+click on help or visit our website. │
└──────────────────────────────────────────────────────────────────────┘
BusyBox v1.36.1 (2023-11-14 13:38:11 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt 23.05.2, r23630-842932a63d
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# ubus call system board
{
"kernel": "5.15.137",
"hostname": "OpenWrt",
"system": "ARMv7 Processor rev 5 (v7l)",
"model": "MikroTik cAP ac",
"board_name": "mikrotik,cap-ac",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "23.05.2",
"revision": "r23630-842932a63d",
"target": "ipq40xx/mikrotik",
"description": "OpenWrt 23.05.2 r23630-842932a63d"
}
}
root@OpenWrt:~# ^C
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdea:72db:d89b::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan'
config device
option name 'lan'
option macaddr '18*****'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config device
option name 'wan'
option macaddr '18*****'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
root@OpenWrt:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/a000000.wifi'
option channel '1'
option band '2g'
option htmode 'HT20'
option disabled '1'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt'
option encryption 'none'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/a800000.wifi'
option channel '36'
option band '5g'
option htmode 'VHT80'
option disabled '1'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt'
option encryption 'none'
root@OpenWrt:~# ^C
root@OpenWrt:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option nonwildcard '1'
option localservice '1'
option ednspacket_max '1232'
option filter_aaaa '0'
option filter_a '0'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
option ra_slaac '1'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
root@OpenWrt:~#
As requested
Delete these:
Then edit br-lan so that it looks like this:
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan'
list ports 'wan'
Change the address of your lan interface to ensure that it is on the same subnet as your main router, but does not cause an address conflict (it must not be the same address as the router or any other static IP configured device on the network, and it should be outside the DHCP pool). Alternatively, you could set the proto to dhcp and delete the stuff below that.
Finally, explicitly disable the dhcp server on lan by adding the ignore line and removing the IPv6 related lines:
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option ignore '1'
Of course, you'll also need to enable your wifi, but that goes without saying since you want to make a dumb AP
Once those things are done, you can reboot the device and connect the PoE wan port to the lan of your network and it shuold work
1 Like
system
February 4, 2024, 7:52am
7
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.
